$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/121ed175-abf6-3454-b539-4f543b06c24b.roa File: 121ed175-abf6-3454-b539-4f543b06c24b.roa (raw, json) Hash identifier: Oh2UsJKLdtEimZgd3f/iz4PWzhV9nGXTdnWCpqNfCTE= Subject key identifier: 09:1A:25:6B:D0:26:1E:F0:15:52:3B:25:7D:B7:57:FA:A7:19:03:64 Certificate issuer: /CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Certificate serial: 010D0C9F4328584AAC0D516DA3D6CFFAF7E15F80 Authority key identifier: D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/121ed175-abf6-3454-b539-4f543b06c24b.roa Signing time: Mon 28 Jul 2025 20:46:38 +0000 ROA not before: Mon 28 Jul 2025 20:46:38 +0000 ROA not after: Sun 26 Oct 2025 20:46:38 +0000 asID: 399881 IP address blocks: 23.183.208.0/24 maxlen: 24 2606:4cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:0d:51:6d:a3:d6:cf:fa:f7:e1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Validity Not Before: Jul 28 20:46:38 2025 GMT Not After : Oct 26 20:46:38 2025 GMT Subject: CN=cf67e212-6b4f-40d8-aac6-c2d00af2640d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:e2:bc:4e:bc:83:cf:f0:b2:1d:11:76:57: 3e:99:46:60:86:33:01:3a:19:23:fb:a0:9e:ed:dd: 4d:d6:85:5d:3e:1b:b7:82:3f:26:ee:b7:ec:51:a0: 79:8f:a7:66:47:9e:72:f8:29:6c:a0:be:55:69:6a: f6:f9:63:71:5c:e7:b2:9b:67:ce:46:18:1d:93:b3: 70:f6:02:8a:d7:ed:a5:85:3d:5e:3d:8a:e6:cd:0b: 1d:06:39:37:32:56:1c:b7:10:c6:df:ea:06:09:26: 88:f7:f0:a9:f4:31:ef:c3:1b:e7:be:ca:ec:e5:ad: 4b:a0:69:70:ed:e1:4a:4a:2d:73:d3:d0:b0:2d:39: 42:41:e9:6d:0b:3a:6b:7d:cf:a9:06:75:09:b1:e5: c8:0b:dd:c4:e6:4a:77:2e:cd:57:bc:4f:8f:32:c9: 32:5e:9a:8c:09:54:2f:54:93:cc:ac:4a:ee:c8:a0: 9e:07:07:31:08:86:77:5d:24:b6:e0:78:71:1d:83: c4:17:e6:1a:f6:4a:b4:87:de:1d:77:63:8d:95:80: d3:82:b1:4a:06:bb:6a:95:cd:d4:29:e4:62:d4:67: 2a:b4:40:e7:a6:38:66:ce:aa:f9:aa:4f:7c:97:b2: 7f:2b:c9:43:50:99:c5:98:c1:bc:d0:a6:d5:c3:f5: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:25:6B:D0:26:1E:F0:15:52:3B:25:7D:B7:57:FA:A7:19:03:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/121ed175-abf6-3454-b539-4f543b06c24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl X509v3 Authority Key Identifier: keyid:D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer sbgp-ipAddrBlock: critical IPv4: 23.183.208.0/24 IPv6: 2606:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c3:15:3d:76:27:a3:3b:e3:41:87:38:7b:70:00:4b:4f:51: 8e:f8:20:9e:c9:19:7b:b1:40:fd:6b:db:f4:9f:17:89:95:74: 80:b4:34:05:9e:e3:a4:7b:5b:10:e8:7b:c7:bd:b0:9e:98:6a: d4:b3:45:e4:b2:98:6a:15:79:fb:6e:35:b9:7e:a7:72:2a:d2: 10:83:86:d3:5f:80:95:fc:9e:4b:8e:47:73:4b:f7:46:6f:08: f1:22:98:1b:32:ff:d7:08:80:c2:f8:65:6e:b4:01:b8:68:d6: f3:47:73:c6:7f:b6:c6:b4:15:0d:7d:c4:a0:46:80:af:4a:fa: 35:2d:3a:0d:9a:5e:e5:d3:81:ac:eb:1a:4d:ff:62:6d:5b:2c: 2b:9c:57:26:24:6f:1d:4e:f0:e1:c6:c6:60:cd:33:c6:18:7c: 4d:92:ed:fa:10:c4:18:d1:a7:a0:76:19:84:16:d1:78:b3:96: d2:87:28:e3:50:8c:6f:2b:a6:00:54:46:ab:01:f4:bd:e0:a4: b4:2b:d2:e8:40:c9:32:4e:e1:04:89:1f:01:1c:ed:64:1f:5a: 7a:19:62:9b:12:2a:fd:ee:d1:dc:f9:b6:42:11:30:8d:fe:7c: 83:09:6e:e6:08:07:95:0a:07:c1:4d:35:62:5f:c7:b6:f3:ea: 79:e6:93:a0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqsDVFto9bP+vfhX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyNDc1OWEtMmYwYS00NzhmLThlYjEtNDFmMWI4NjM1 M2Y5MB4XDTI1MDcyODIwNDYzOFoXDTI1MTAyNjIwNDYzOFowLzEtMCsGA1UEAxMk Y2Y2N2UyMTItNmI0Zi00MGQ4LWFhYzYtYzJkMDBhZjI2NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TvivE68g8/wsh0Rdlc+mUZghjMBOhkj+6Ce 7d1N1oVdPhu3gj8m7rfsUaB5j6dmR55y+ClsoL5VaWr2+WNxXOeym2fORhgdk7Nw 9gKK1+2lhT1ePYrmzQsdBjk3MlYctxDG3+oGCSaI9/Cp9DHvwxvnvsrs5a1LoGlw 7eFKSi1z09CwLTlCQeltCzprfc+pBnUJseXIC93E5kp3Ls1XvE+PMskyXpqMCVQv VJPMrEruyKCeBwcxCIZ3XSS24HhxHYPEF+Ya9kq0h94dd2ONlYDTgrFKBrtqlc3U KeRi1GcqtEDnpjhmzqr5qk98l7J/K8lDUJnFmMG80KbVw/XCOwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAkaJWvQJh7wFVI7JX23V/qnGQNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0 NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYxYjg2MzUzZjkvMTIxZWQxNzUtYWJmNi0z NDU0LWI1MzktNGY1NDNiMDZjMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTUyNDc1OWEtMmYwYS00NzhmLThl YjEtNDFmMWI4NjM1M2Y5LzU1MjQ3NTlhLTJmMGEtNDc4Zi04ZWIxLTQxZjFiODYz NTNmOS5jcmwwHwYDVR0jBBgwFoAU04lYZjlEzB2z/u899p43vHZFsmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYx Yjg2MzUzZjkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7fQMA0E AgACMAcDBQAmBkzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB3DFT12J6M740GHOHtwAEtPUY74IJ7JGXux QP1r2/SfF4mVdIC0NAWe46R7WxDoe8e9sJ6YatSzReSymGoVeftuNbl+p3Iq0hCD htNfgJX8nkuOR3NL90ZvCPEimBsy/9cIgML4ZW60Abho1vNHc8Z/tsa0FQ19xKBG gK9K+jUtOg2aXuXTgazrGk3/Ym1bLCucVyYkbx1O8OHGxmDNM8YYfE2S7foQxBjR p6B2GYQW0XizltKHKONQjG8rpgBURqsB9L3gpLQr0uhAyTJO4QSJHwEc7WQfWnoZ YpsSKv3u0dz5tkIRMI3+fIMJbuYIB5UKB8FNNWJfx7bz6nnmk6A= -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:27 2025 by rpki-client